# Problem installing input pcap plugin

**URL:** <https://discuss.elastic.co/t/problem-installing-input-pcap-plugin/62484>\
**Category:** Logstash\
**Created:** [October 7, 2016, 12:17pm UTC](https://discuss.elastic.co/t/problem-installing-input-pcap-plugin/62484 "2016-10-07T12:17:39Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![arque](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@arque](https://discuss.elastic.co/u/arque)\
**Post date:** [October 7, 2016, 12:17pm UTC](https://discuss.elastic.co/t/problem-installing-input-pcap-plugin/62484/1 "2016-10-07T12:17:39Z")

</div>

Hi,

I want to install the [logstash-input-pcap plugin](https://github.com/purbon/logstash-input-pcap).  
However, when I run `bin\logstash-plugin install logstash-input-pcap`, I get the error `LogStash::GemFileError: duplicate gem logstash-filter-date`, and the plugin is not installed.  
Could you help me install this plugin?  
Thank you.

EDIT: I've downloaded the plugin, extracted it and built the GEMSPEC into a GEM file.  
However, I keep getting the same error message when now running `bin\logstash-plugin install "C:\ELK\logstash\p\logstash-input-pcap-0.1.1.gem"`

Edit2: The complete error message is:

```
    Validating c:\elk\logstash\p\logstash-input-pcap-0.1.1.gem
        Installing logstash-input-pcap
        
            LogStash::GemfileError: duplicate gem logstash-filter-date
                     add_gem at C:/ELK/logstash/lib/pluginmanager/gemfile.rb:102
                         gem at C:/ELK/logstash/lib/pluginmanager/gemfile.rb:200
                      (eval) at (eval):109
               instance_eval at org/jruby/RubyBasicObject.java:1598
                       parse at C:/ELK/logstash/lib/pluginmanager/gemfile.rb:188
                        load at C:/ELK/logstash/lib/pluginmanager/gemfile.rb:19
                     gemfile at C:/ELK/logstash/lib/pluginmanager/command.rb:4
          install_gems_list! at C:/ELK/logstash/lib/pluginmanager/install.rb:116
                     execute at C:/ELK/logstash/lib/pluginmanager/install.rb:31
                         run at C:/ELK/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5
        /lib/clamp/command.rb:67
                     execute at C:/ELK/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5
        /lib/clamp/subcommand/execution.rb:11
                         run at C:/ELK/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5
        /lib/clamp/command.rb:67
                         run at C:/ELK/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5
        /lib/clamp/command.rb:132
                      (root) at C:\ELK\logstash\lib\pluginmanager\main.rb:43
        C:\elk\logstash>
```

---

<div class="post-metadata">

**Author:** ![arque](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@arque](https://discuss.elastic.co/u/arque)\
**Post date:** [October 7, 2016, 5:58pm UTC](https://discuss.elastic.co/t/problem-installing-input-pcap-plugin/62484/2 "2016-10-07T17:58:35Z")

</div>

Well, I commented out the line of `logstash-filter-date` in logstash gemfile, and it went ok (except that the same error occured then for `logstash-filter-grok` and then `logstash-filter-json`, which were also commented out). After that, the installation completed sucessfully. But in the `bin\logstash-plugin list`, the plugin wasn't there (neither was the plugins that were commented out).  
Did I mess up by commenting those lines out? After that I reinstalled those plugins, but they do not appear in the list either.

Please help me, I really need to pass that pcap file to logstash.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:35am UTC](https://discuss.elastic.co/t/problem-installing-input-pcap-plugin/62484/3 "2017-07-06T04:35:11Z")

</div>

Closed on July 6, 2017, 4:35am UTC